MeusClub Privacy Notice

Last updated: 1 May 2026

This Notice explains how MeusClub processes personal data of users of the app, meusclub.com and connected services. The Italian version is the reference version. Translations are provided for user convenience.

1. Controller

MeusClub is provided by Tenpaso Ltd, a company registered in Malta.

For privacy requests contact privacy@meusclub.com. For general support contact support@meusclub.com.

Because Tenpaso Ltd is established in Malta, the lead supervisory authority for GDPR purposes is the Malta IDPC. Users resident in Italy may also contact the Italian Data Protection Authority.

2. Personal data we process

We may process account and authentication data, profile data, sports data, service usage data, content you publish or send, payment and billing data, technical and device data, security and moderation data, and consent records.

For App Store and Google Play privacy disclosures, the relevant categories include: contact and account data, approximate or precise location when authorised, photos and videos you upload or capture, audio or voice messages when you use the microphone, chat messages and comments, booking data, wallet, purchase and payment data, push notification tokens, app interactions, diagnostics, crash logs, technical device identifiers and analytics or telemetry data.

Card payments are handled through Stripe. MeusClub does not store full card numbers, CVC codes or complete bank credentials.

We do not intentionally request special categories of data under Article 9 GDPR. If a user voluntarily includes sensitive data in content or messages, we process it only as necessary for technical operation, security or report handling.

3. Necessary and optional data

Some data is necessary to create and manage the account, provide bookings, payments, community and security. Other data is optional, such as profile photo, bio, published content, marketing, non-essential analytics and functions requiring device permissions.

If you do not provide necessary data, we may be unable to provide the requested feature. You may use basic features without optional data unless it is technically required for the chosen feature.

4. Data we do not collect

We do not access the device contact book.

We do not make solely automated decisions producing legal or similarly significant effects under Article 22 GDPR. If we introduce such processing in the future, we will update this Notice and provide the safeguards required by law.

5. Device permissions

Some features may require operating system permissions, such as location, microphone, camera, photo gallery or media files and push notifications.

Access occurs only when you activate the feature and grant permission. You can revoke permissions in device settings, but some features may not be available.

We use location to show nearby clubs and area-based results. We use camera and photo gallery access for profile, club, event, community, Moments and chat attachment media. We use the microphone only for audio features such as voice messages or media you choose to record. We use push notifications for operational communications about your account, bookings, payments, clubs, chats and security.

6. Sources of data

Data may come directly from you, from your device and usage session, from login providers, payment providers, clubs using MeusClub and other users when they interact with you or submit reports.

7. Purposes and legal bases

We process data to create and manage accounts, provide bookings, community, chats, wallet, payments and subscriptions, manage sports statistics, security, anti-fraud, moderation, notifications, support, consent-based marketing, consent-based non-essential analytics, legal claims and authority requests.

The main legal bases are contract performance, legal obligation, consent and legitimate interest, depending on the specific purpose.

8. AI Coach and AI Assistant

When you use AI Coach or AI Assistant, we process your prompt and the context data necessary to generate the requested response. This processing is needed to provide the feature you chose to use.

We do not use user content to train proprietary MeusClub models. If we introduce additional AI uses not necessary for the requested feature, we will describe them separately and request consent where needed.

9. Data sharing

We may share data, as necessary, with Supabase, Stripe, OpenAI, Sentry, Expo, FCM, APNs, transactional email providers, Cloudflare R2, clubs and club staff, professional advisers, auditors and authorities where permitted or required by law.

In particular: Stripe processes payment data; Supabase hosts application data and authentication; Cloudflare R2 stores user-uploaded media; Sentry processes diagnostics and crash logs; Expo, FCM and APNs handle push notification tokens and delivery; clubs and their staff can access the data needed to manage memberships, bookings, events, payments, chats and support.

Some recipients act as processors, others as independent controllers for their part of the service.

10. Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where this happens, we use GDPR mechanisms such as adequacy decisions, the EU-US Data Privacy Framework, Standard Contractual Clauses and supplementary measures where necessary.

11. Retention

We keep data for as long as necessary for the purposes for which it was collected and for applicable obligations. Where possible, we delete or anonymise data that is no longer needed.

12. Cookies, SDKs and similar tools

The mobile app may use SDKs, tokens and technical identifiers required for login, notifications, security, diagnostics, essential or consent-based analytics and operation of the service.

Web surfaces may use cookies or similar tools. Non-essential tools are managed according to applicable consent rules.

13. Your rights

You have the right to access your data, request rectification, erasure, restriction, portability, object to processing based on legitimate interest, withdraw consent and lodge a complaint with the competent authority.

You can exercise your rights by writing to privacy@meusclub.com.

14. Minors

MeusClub is not intended for users under 16. If a user is under 18, they must use the service with permission from a parent or guardian. If we become aware that a user below the required age or without a valid legal basis is using the service, we may suspend the account and delete relevant data.

15. Security

We adopt reasonable technical and organisational measures to protect personal data, including access controls, privilege management, logging, backups and application security measures.

16. Changes to this Notice

We may update this Notice. We will publish the new version with an updated date and, for material changes, use appropriate channels to inform users.

17. Contacts

• Privacy and personal data: privacy@meusclub.com
• Support: support@meusclub.com
• Website: https://meusclub.com